docs(repo): Document Client Trust duration and cookieExpiresAt usage - #9350

Merged
SarahSoutoul merged 3 commits into
mainfrom
ss/DOCS-11777
Aug 7, 2026
Merged

docs(repo): Document Client Trust duration and cookieExpiresAt usage#9350
SarahSoutoul merged 3 commits into
mainfrom
ss/DOCS-11777

Conversation

@SarahSoutoul

@SarahSoutoulSarahSoutoul commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

Description

Clarifies the ClientResource.cookieExpiresAt JSDoc so developers understand that it reports the client authentication cookie’s current expiration time, can change when Clerk refreshes the cookie, and can be null.

The updated documentation also explains that Device Trust uses the client cookie to recognize a known browser and links to the Device Trust guide.

An empty changeset is included because this is a documentation-only package change.

This fixes this ticket, with its sibling clerk-docs PR.

Checklist

  • pnpm test runs as expected.
  • pnpm build runs as expected.
  • (If applicable) JSDoc comments have been added or updated for any package exports
  • (If applicable) Documentation has been updated

Type of change

  • 🐛 Bug fix
  • 🌟 New feature
  • 🔨 Breaking change
  • 📖 Refactoring / dependency upgrade / documentation
  • other:

@SarahSoutoulSarahSoutoul self-assigned this Aug 6, 2026
@changeset-bot

changeset-botBot commented Aug 6, 2026

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: 8a815c4

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 23 packages
NameType
@clerk/sharedPatch
@clerk/astroPatch
@clerk/backendPatch
@clerk/chrome-extensionPatch
@clerk/clerk-jsPatch
@clerk/electronPatch
@clerk/expo-passkeysPatch
@clerk/expoPatch
@clerk/expressPatch
@clerk/fastifyPatch
@clerk/headlessPatch
@clerk/honoPatch
@clerk/localizationsPatch
@clerk/mswPatch
@clerk/nextjsPatch
@clerk/nuxtPatch
@clerk/react-routerPatch
@clerk/reactPatch
@clerk/tanstack-react-startPatch
@clerk/testingPatch
@clerk/uiPatch
@clerk/vuePatch
@clerk/swingsetPatch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@vercel

vercelBot commented Aug 6, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentActionsUpdated (UTC)
clerk-js-sandboxReadyReadyPreviewAug 6, 2026 10:54pm
swingsetReadyReadyPreviewAug 6, 2026 10:54pm

Request Review

@pkg-pr-new

pkg-pr-newBot commented Aug 6, 2026

Copy link
Copy Markdown

Open in StackBlitz

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@9350

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@9350

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@9350

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@9350

@clerk/electron

npm i https://pkg.pr.new/@clerk/electron@9350

@clerk/electron-passkeys

npm i https://pkg.pr.new/@clerk/electron-passkeys@9350

@clerk/eslint-plugin

npm i https://pkg.pr.new/@clerk/eslint-plugin@9350

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@9350

@clerk/expo-google-signin

npm i https://pkg.pr.new/@clerk/expo-google-signin@9350

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@9350

@clerk/express

npm i https://pkg.pr.new/@clerk/express@9350

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@9350

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@9350

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@9350

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@9350

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@9350

@clerk/react

npm i https://pkg.pr.new/@clerk/react@9350

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@9350

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@9350

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@9350

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@9350

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@9350

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@9350

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@9350

commit: 8a815c4

@SarahSoutoulSarahSoutoul changed the title Document Client Trust duration and cookieExpiresAt usagedocs(repo): Document Client Trust duration and cookieExpiresAt usageAug 6, 2026
@SarahSoutoul
SarahSoutoul marked this pull request as ready for review August 6, 2026 14:41
@github-actions

github-actionsBot commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

API Changes Report

Generated by Break Check on 2026-08-06T23:15:13.561Z

Summary

MetricCount
Packages analyzed19
Packages with changes0
🔴 Breaking changes0
🟡 Non-breaking changes0
🟢 Additions0

No API Changes Detected

All packages have stable APIs with no detected changes.


Report generated by Break Check

Last ran on 8a815c4.

@coderabbitai

coderabbitaiBot commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

Review Change Stack

📝 Walkthrough

Walkthrough

The pull request clarifies the cookieExpiresAt documentation. It describes client authentication cookie refreshes, nullable values, and Device Trust usage. It also adds patch Changeset metadata.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Suggested reviewers:manovotny, mwickett

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check nameStatusExplanation
Title check✅ PassedThe title clearly identifies the documentation update for cookieExpiresAt and its trust-related usage.
Description check✅ PassedThe description directly explains the JSDoc changes, Device Trust context, changeset, and related documentation work.
Docstring Coverage✅ PassedNo functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check✅ PassedCheck skipped because no linked issues were found for this pull request.
Out of Scope Changes check✅ PassedCheck skipped because no linked issues were found for this pull request.

Comment @coderabbitai help to get the list of available commands.

…geset
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@manovotny

manovotny commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

Pushed a change directly in 4dcedc9.

  • Swapped the empty changeset for a @clerk/shared: patch one so this JSDoc clarification actually ships to consumers.

@coderabbitaicoderabbitaiBot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In @.changeset/tidy-client-cookie-docs.md:
- Line 5: Update the documentation for ClientResource.cookieExpiresAt to
describe it as the current expiration time of the client authentication cookie
used by Device Trust to recognize a known browser. Explicitly state that it is
nullable and may change when Clerk refreshes the client cookie, without implying
that the property contains the cookie itself.
🪄 Autofix

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Repository YAML (base), Organization UI (inherited)

Review profile: CHILL

Plan: Pro Plus

Run ID: 105813fd-4d6c-42fa-a69f-a9d29e72d073

📥 Commits

Reviewing files that changed from the base of the PR and between 2095a70 and 4dcedc9.

📒 Files selected for processing (1)
  • .changeset/tidy-client-cookie-docs.md
🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

  • clerk/clerk_go(manual)
  • clerk/dashboard(manual)
  • clerk/accounts(manual)
  • clerk/backoffice(manual)
  • clerk/clerk(manual) → reviewed against open PR #3108ss/DOCS-11777 instead of the default branch
  • clerk/clerk-docs(manual)
  • clerk/cloudflare-workers(manual)
  • clerk/clerk-ios(auto-detected)
  • clerk/clerk-android(auto-detected)
  • clerk/cli(auto-detected)

'@clerk/shared': patch
---

Clarify that `ClientResource.cookieExpiresAt` is nullable, can change when Clerk refreshes the client cookie, and reflects the cookie Device Trust uses to recognize a browser.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

📐 Maintainability & Code Quality | 🟡 Minor | ⚡ Quick win

Describe cookieExpiresAt as an expiration time.

The implementation stores cookieExpiresAt as Date | null. The phrase “reflects the cookie” can imply that the property contains the cookie itself. State that it represents the current expiration time of the client authentication cookie used by Device Trust to recognize a known browser.

Proposed wording
-Clarify that `ClientResource.cookieExpiresAt` is nullable, can change when Clerk refreshes the client cookie, and reflects the cookie Device Trust uses to recognize a browser.+Clarify that `ClientResource.cookieExpiresAt` is nullable, can change when Clerk refreshes the client cookie, and represents the current expiration time of the client authentication cookie used by Device Trust to recognize a known browser.
📝 Committable suggestion

‼️IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
Clarify that `ClientResource.cookieExpiresAt` is nullable, can change when Clerk refreshes the client cookie, and reflects the cookie Device Trust uses to recognize a browser.
Clarify that `ClientResource.cookieExpiresAt` is nullable, can change when Clerk refreshes the client cookie, and represents the current expiration time of the client authentication cookie used by Device Trust to recognize a known browser.
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In @.changeset/tidy-client-cookie-docs.md at line 5, Update the documentation
for ClientResource.cookieExpiresAt to describe it as the current expiration time
of the client authentication cookie used by Device Trust to recognize a known
browser. Explicitly state that it is nullable and may change when Clerk
refreshes the client cookie, without implying that the property contains the
cookie itself.

@SarahSoutoul
SarahSoutoul merged commit 34d278b into mainAug 7, 2026
52 checks passed
@SarahSoutoul
SarahSoutoul deleted the ss/DOCS-11777 branch August 7, 2026 07:54
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants

@SarahSoutoul@manovotny@mwickett
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Add copy buttons to all
 blocks\n(function() {\n function addCopyButtons() {\n document.querySelectorAll('pre code').forEach(function(codeBlock) {\n if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;\n codeBlock.parentElement.setAttribute('data-copy-added', 'true');\n \n var btn = document.createElement('button');\n btn.textContent = 'Copy';\n btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';\n btn.onmouseover = function() { this.style.opacity = '1'; };\n btn.onmouseout = function() { this.style.opacity = '0.7'; };\n btn.onclick = function() {\n navigator.clipboard.writeText(codeBlock.textContent).then(function() {\n btn.textContent = 'Copied!';\n setTimeout(function() { btn.textContent = 'Copy'; }, 1500);\n });\n };\n codeBlock.parentElement.style.position = 'relative';\n codeBlock.parentElement.appendChild(btn);\n });\n }\n \n addCopyButtons();\n \n // Re-run on dynamic content\n var observer = new MutationObserver(addCopyButtons);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Add Copy Buttons to Code Blocks");
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '
Skip to content

docs(repo): Document Client Trust duration and cookieExpiresAt usage - #9350

Merged
SarahSoutoul merged 3 commits into
mainfrom
ss/DOCS-11777
Aug 7, 2026
Merged

docs(repo): Document Client Trust duration and cookieExpiresAt usage#9350
SarahSoutoul merged 3 commits into
mainfrom
ss/DOCS-11777

Conversation

@SarahSoutoul

@SarahSoutoulSarahSoutoul commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

Description

Clarifies the ClientResource.cookieExpiresAt JSDoc so developers understand that it reports the client authentication cookie’s current expiration time, can change when Clerk refreshes the cookie, and can be null.

The updated documentation also explains that Device Trust uses the client cookie to recognize a known browser and links to the Device Trust guide.

An empty changeset is included because this is a documentation-only package change.

This fixes this ticket, with its sibling clerk-docs PR.

Checklist

  • pnpm test runs as expected.
  • pnpm build runs as expected.
  • (If applicable) JSDoc comments have been added or updated for any package exports
  • (If applicable) Documentation has been updated

Type of change

  • 🐛 Bug fix
  • 🌟 New feature
  • 🔨 Breaking change
  • 📖 Refactoring / dependency upgrade / documentation
  • other:

@SarahSoutoulSarahSoutoul self-assigned this Aug 6, 2026
@changeset-bot

changeset-botBot commented Aug 6, 2026

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: 8a815c4

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 23 packages
NameType
@clerk/sharedPatch
@clerk/astroPatch
@clerk/backendPatch
@clerk/chrome-extensionPatch
@clerk/clerk-jsPatch
@clerk/electronPatch
@clerk/expo-passkeysPatch
@clerk/expoPatch
@clerk/expressPatch
@clerk/fastifyPatch
@clerk/headlessPatch
@clerk/honoPatch
@clerk/localizationsPatch
@clerk/mswPatch
@clerk/nextjsPatch
@clerk/nuxtPatch
@clerk/react-routerPatch
@clerk/reactPatch
@clerk/tanstack-react-startPatch
@clerk/testingPatch
@clerk/uiPatch
@clerk/vuePatch
@clerk/swingsetPatch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@vercel

vercelBot commented Aug 6, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentActionsUpdated (UTC)
clerk-js-sandboxReadyReadyPreviewAug 6, 2026 10:54pm
swingsetReadyReadyPreviewAug 6, 2026 10:54pm

Request Review

@pkg-pr-new

pkg-pr-newBot commented Aug 6, 2026

Copy link
Copy Markdown

Open in StackBlitz

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@9350

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@9350

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@9350

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@9350

@clerk/electron

npm i https://pkg.pr.new/@clerk/electron@9350

@clerk/electron-passkeys

npm i https://pkg.pr.new/@clerk/electron-passkeys@9350

@clerk/eslint-plugin

npm i https://pkg.pr.new/@clerk/eslint-plugin@9350

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@9350

@clerk/expo-google-signin

npm i https://pkg.pr.new/@clerk/expo-google-signin@9350

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@9350

@clerk/express

npm i https://pkg.pr.new/@clerk/express@9350

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@9350

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@9350

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@9350

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@9350

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@9350

@clerk/react

npm i https://pkg.pr.new/@clerk/react@9350

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@9350

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@9350

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@9350

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@9350

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@9350

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@9350

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@9350

commit: 8a815c4

@SarahSoutoulSarahSoutoul changed the title Document Client Trust duration and cookieExpiresAt usagedocs(repo): Document Client Trust duration and cookieExpiresAt usageAug 6, 2026
@SarahSoutoul
SarahSoutoul marked this pull request as ready for review August 6, 2026 14:41
@github-actions

github-actionsBot commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

API Changes Report

Generated by Break Check on 2026-08-06T23:15:13.561Z

Summary

MetricCount
Packages analyzed19
Packages with changes0
🔴 Breaking changes0
🟡 Non-breaking changes0
🟢 Additions0

No API Changes Detected

All packages have stable APIs with no detected changes.


Report generated by Break Check

Last ran on 8a815c4.

@coderabbitai

coderabbitaiBot commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

Review Change Stack

📝 Walkthrough

Walkthrough

The pull request clarifies the cookieExpiresAt documentation. It describes client authentication cookie refreshes, nullable values, and Device Trust usage. It also adds patch Changeset metadata.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Suggested reviewers:manovotny, mwickett

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check nameStatusExplanation
Title check✅ PassedThe title clearly identifies the documentation update for cookieExpiresAt and its trust-related usage.
Description check✅ PassedThe description directly explains the JSDoc changes, Device Trust context, changeset, and related documentation work.
Docstring Coverage✅ PassedNo functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check✅ PassedCheck skipped because no linked issues were found for this pull request.
Out of Scope Changes check✅ PassedCheck skipped because no linked issues were found for this pull request.

Comment @coderabbitai help to get the list of available commands.

…geset
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@manovotny

manovotny commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

Pushed a change directly in 4dcedc9.

  • Swapped the empty changeset for a @clerk/shared: patch one so this JSDoc clarification actually ships to consumers.

@coderabbitaicoderabbitaiBot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In @.changeset/tidy-client-cookie-docs.md:
- Line 5: Update the documentation for ClientResource.cookieExpiresAt to
describe it as the current expiration time of the client authentication cookie
used by Device Trust to recognize a known browser. Explicitly state that it is
nullable and may change when Clerk refreshes the client cookie, without implying
that the property contains the cookie itself.
🪄 Autofix

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Repository YAML (base), Organization UI (inherited)

Review profile: CHILL

Plan: Pro Plus

Run ID: 105813fd-4d6c-42fa-a69f-a9d29e72d073

📥 Commits

Reviewing files that changed from the base of the PR and between 2095a70 and 4dcedc9.

📒 Files selected for processing (1)
  • .changeset/tidy-client-cookie-docs.md
🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

  • clerk/clerk_go(manual)
  • clerk/dashboard(manual)
  • clerk/accounts(manual)
  • clerk/backoffice(manual)
  • clerk/clerk(manual) → reviewed against open PR #3108ss/DOCS-11777 instead of the default branch
  • clerk/clerk-docs(manual)
  • clerk/cloudflare-workers(manual)
  • clerk/clerk-ios(auto-detected)
  • clerk/clerk-android(auto-detected)
  • clerk/cli(auto-detected)

'@clerk/shared': patch
---

Clarify that `ClientResource.cookieExpiresAt` is nullable, can change when Clerk refreshes the client cookie, and reflects the cookie Device Trust uses to recognize a browser.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

📐 Maintainability & Code Quality | 🟡 Minor | ⚡ Quick win

Describe cookieExpiresAt as an expiration time.

The implementation stores cookieExpiresAt as Date | null. The phrase “reflects the cookie” can imply that the property contains the cookie itself. State that it represents the current expiration time of the client authentication cookie used by Device Trust to recognize a known browser.

Proposed wording
-Clarify that `ClientResource.cookieExpiresAt` is nullable, can change when Clerk refreshes the client cookie, and reflects the cookie Device Trust uses to recognize a browser.+Clarify that `ClientResource.cookieExpiresAt` is nullable, can change when Clerk refreshes the client cookie, and represents the current expiration time of the client authentication cookie used by Device Trust to recognize a known browser.
📝 Committable suggestion

‼️IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
Clarify that `ClientResource.cookieExpiresAt` is nullable, can change when Clerk refreshes the client cookie, and reflects the cookie Device Trust uses to recognize a browser.
Clarify that `ClientResource.cookieExpiresAt` is nullable, can change when Clerk refreshes the client cookie, and represents the current expiration time of the client authentication cookie used by Device Trust to recognize a known browser.
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In @.changeset/tidy-client-cookie-docs.md at line 5, Update the documentation
for ClientResource.cookieExpiresAt to describe it as the current expiration time
of the client authentication cookie used by Device Trust to recognize a known
browser. Explicitly state that it is nullable and may change when Clerk
refreshes the client cookie, without implying that the property contains the
cookie itself.

@SarahSoutoul
SarahSoutoul merged commit 34d278b into mainAug 7, 2026
52 checks passed
@SarahSoutoul
SarahSoutoul deleted the ss/DOCS-11777 branch August 7, 2026 07:54
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants

@SarahSoutoul@manovotny@mwickett
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Force GitHub README to respect dark mode\n(function() {\n var style = document.createElement('style');\n style.textContent = '\n .markdown-body {\n color-scheme: dark light;\n }\n .markdown-body pre { background: #161b22 !important; }\n .markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }\n .markdown-body table th, .markdown-body table td { border-color: #30363d !important; }\n .markdown-body img { background: #0d1117; }\n .markdown-body blockquote { border-left-color: #8b949e; }\n .markdown-body hr { border-color: #30363d; }\n ';\n document.head.appendChild(style);\n})();", "GitHub Dark Mode README Fix"); } } catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + '
Skip to content

docs(repo): Document Client Trust duration and cookieExpiresAt usage - #9350

Merged
SarahSoutoul merged 3 commits into
mainfrom
ss/DOCS-11777
Aug 7, 2026
Merged

docs(repo): Document Client Trust duration and cookieExpiresAt usage#9350
SarahSoutoul merged 3 commits into
mainfrom
ss/DOCS-11777

Conversation

@SarahSoutoul

@SarahSoutoulSarahSoutoul commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

Description

Clarifies the ClientResource.cookieExpiresAt JSDoc so developers understand that it reports the client authentication cookie’s current expiration time, can change when Clerk refreshes the cookie, and can be null.

The updated documentation also explains that Device Trust uses the client cookie to recognize a known browser and links to the Device Trust guide.

An empty changeset is included because this is a documentation-only package change.

This fixes this ticket, with its sibling clerk-docs PR.

Checklist

  • pnpm test runs as expected.
  • pnpm build runs as expected.
  • (If applicable) JSDoc comments have been added or updated for any package exports
  • (If applicable) Documentation has been updated

Type of change

  • 🐛 Bug fix
  • 🌟 New feature
  • 🔨 Breaking change
  • 📖 Refactoring / dependency upgrade / documentation
  • other:

@SarahSoutoulSarahSoutoul self-assigned this Aug 6, 2026
@changeset-bot

changeset-botBot commented Aug 6, 2026

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: 8a815c4

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 23 packages
NameType
@clerk/sharedPatch
@clerk/astroPatch
@clerk/backendPatch
@clerk/chrome-extensionPatch
@clerk/clerk-jsPatch
@clerk/electronPatch
@clerk/expo-passkeysPatch
@clerk/expoPatch
@clerk/expressPatch
@clerk/fastifyPatch
@clerk/headlessPatch
@clerk/honoPatch
@clerk/localizationsPatch
@clerk/mswPatch
@clerk/nextjsPatch
@clerk/nuxtPatch
@clerk/react-routerPatch
@clerk/reactPatch
@clerk/tanstack-react-startPatch
@clerk/testingPatch
@clerk/uiPatch
@clerk/vuePatch
@clerk/swingsetPatch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@vercel

vercelBot commented Aug 6, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentActionsUpdated (UTC)
clerk-js-sandboxReadyReadyPreviewAug 6, 2026 10:54pm
swingsetReadyReadyPreviewAug 6, 2026 10:54pm

Request Review

@pkg-pr-new

pkg-pr-newBot commented Aug 6, 2026

Copy link
Copy Markdown

Open in StackBlitz

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@9350

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@9350

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@9350

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@9350

@clerk/electron

npm i https://pkg.pr.new/@clerk/electron@9350

@clerk/electron-passkeys

npm i https://pkg.pr.new/@clerk/electron-passkeys@9350

@clerk/eslint-plugin

npm i https://pkg.pr.new/@clerk/eslint-plugin@9350

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@9350

@clerk/expo-google-signin

npm i https://pkg.pr.new/@clerk/expo-google-signin@9350

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@9350

@clerk/express

npm i https://pkg.pr.new/@clerk/express@9350

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@9350

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@9350

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@9350

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@9350

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@9350

@clerk/react

npm i https://pkg.pr.new/@clerk/react@9350

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@9350

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@9350

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@9350

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@9350

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@9350

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@9350

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@9350

commit: 8a815c4

@SarahSoutoulSarahSoutoul changed the title Document Client Trust duration and cookieExpiresAt usagedocs(repo): Document Client Trust duration and cookieExpiresAt usageAug 6, 2026
@SarahSoutoul
SarahSoutoul marked this pull request as ready for review August 6, 2026 14:41
@github-actions

github-actionsBot commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

API Changes Report

Generated by Break Check on 2026-08-06T23:15:13.561Z

Summary

MetricCount
Packages analyzed19
Packages with changes0
🔴 Breaking changes0
🟡 Non-breaking changes0
🟢 Additions0

No API Changes Detected

All packages have stable APIs with no detected changes.


Report generated by Break Check

Last ran on 8a815c4.

@coderabbitai

coderabbitaiBot commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

Review Change Stack

📝 Walkthrough

Walkthrough

The pull request clarifies the cookieExpiresAt documentation. It describes client authentication cookie refreshes, nullable values, and Device Trust usage. It also adds patch Changeset metadata.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Suggested reviewers:manovotny, mwickett

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check nameStatusExplanation
Title check✅ PassedThe title clearly identifies the documentation update for cookieExpiresAt and its trust-related usage.
Description check✅ PassedThe description directly explains the JSDoc changes, Device Trust context, changeset, and related documentation work.
Docstring Coverage✅ PassedNo functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check✅ PassedCheck skipped because no linked issues were found for this pull request.
Out of Scope Changes check✅ PassedCheck skipped because no linked issues were found for this pull request.

Comment @coderabbitai help to get the list of available commands.

…geset
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@manovotny

manovotny commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

Pushed a change directly in 4dcedc9.

  • Swapped the empty changeset for a @clerk/shared: patch one so this JSDoc clarification actually ships to consumers.

@coderabbitaicoderabbitaiBot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In @.changeset/tidy-client-cookie-docs.md:
- Line 5: Update the documentation for ClientResource.cookieExpiresAt to
describe it as the current expiration time of the client authentication cookie
used by Device Trust to recognize a known browser. Explicitly state that it is
nullable and may change when Clerk refreshes the client cookie, without implying
that the property contains the cookie itself.
🪄 Autofix

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Repository YAML (base), Organization UI (inherited)

Review profile: CHILL

Plan: Pro Plus

Run ID: 105813fd-4d6c-42fa-a69f-a9d29e72d073

📥 Commits

Reviewing files that changed from the base of the PR and between 2095a70 and 4dcedc9.

📒 Files selected for processing (1)
  • .changeset/tidy-client-cookie-docs.md
🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

  • clerk/clerk_go(manual)
  • clerk/dashboard(manual)
  • clerk/accounts(manual)
  • clerk/backoffice(manual)
  • clerk/clerk(manual) → reviewed against open PR #3108ss/DOCS-11777 instead of the default branch
  • clerk/clerk-docs(manual)
  • clerk/cloudflare-workers(manual)
  • clerk/clerk-ios(auto-detected)
  • clerk/clerk-android(auto-detected)
  • clerk/cli(auto-detected)

'@clerk/shared': patch
---

Clarify that `ClientResource.cookieExpiresAt` is nullable, can change when Clerk refreshes the client cookie, and reflects the cookie Device Trust uses to recognize a browser.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

📐 Maintainability & Code Quality | 🟡 Minor | ⚡ Quick win

Describe cookieExpiresAt as an expiration time.

The implementation stores cookieExpiresAt as Date | null. The phrase “reflects the cookie” can imply that the property contains the cookie itself. State that it represents the current expiration time of the client authentication cookie used by Device Trust to recognize a known browser.

Proposed wording
-Clarify that `ClientResource.cookieExpiresAt` is nullable, can change when Clerk refreshes the client cookie, and reflects the cookie Device Trust uses to recognize a browser.+Clarify that `ClientResource.cookieExpiresAt` is nullable, can change when Clerk refreshes the client cookie, and represents the current expiration time of the client authentication cookie used by Device Trust to recognize a known browser.
📝 Committable suggestion

‼️IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
Clarify that `ClientResource.cookieExpiresAt` is nullable, can change when Clerk refreshes the client cookie, and reflects the cookie Device Trust uses to recognize a browser.
Clarify that `ClientResource.cookieExpiresAt` is nullable, can change when Clerk refreshes the client cookie, and represents the current expiration time of the client authentication cookie used by Device Trust to recognize a known browser.
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In @.changeset/tidy-client-cookie-docs.md at line 5, Update the documentation
for ClientResource.cookieExpiresAt to describe it as the current expiration time
of the client authentication cookie used by Device Trust to recognize a known
browser. Explicitly state that it is nullable and may change when Clerk
refreshes the client cookie, without implying that the property contains the
cookie itself.

@SarahSoutoul
SarahSoutoul merged commit 34d278b into mainAug 7, 2026
52 checks passed
@SarahSoutoul
SarahSoutoul deleted the ss/DOCS-11777 branch August 7, 2026 07:54
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants

@SarahSoutoul@manovotny@mwickett
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Highlight search terms from Google/DuckDuckGo/Bing referrer\n(function() {\n var ref = document.referrer;\n var terms = [];\n \n if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {\n var url = new URL(ref);\n var q = url.searchParams.get('q') || url.searchParams.get('p');\n if (q) {\n terms = q.split(/\\s+/).filter(function(t) { return t.length > 2; });\n }\n }\n \n if (terms.length === 0) return;\n \n var style = document.createElement('style');\n style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';\n document.head.appendChild(style);\n \n function highlight(node) {\n if (node.nodeType === 3) { // text node\n var text = node.textContent;\n var found = false;\n terms.forEach(function(term) {\n var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\') + ')', 'gi');\n if (regex.test(text)) {\n found = true;\n var frag = document.createDocumentFragment();\n var parts = text.split(regex);\n parts.forEach(function(part, i) {\n if (i % 2 === 0) {\n frag.appendChild(document.createTextNode(part));\n } else {\n var span = document.createElement('span');\n span.className = 'userscript-highlight';\n span.textContent = part;\n frag.appendChild(span);\n }\n });\n node.parentNode.replaceChild(frag, node);\n }\n });\n } else if (node.nodeType === 1 && node.childNodes) { // element\n var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];\n if (!skipTags.includes(node.tagName)) {\n Array.from(node.childNodes).forEach(highlight);\n }\n }\n }\n \n highlight(document.body);\n \n // Re-highlight on dynamic content\n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1 || node.nodeType === 3) highlight(node);\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Highlight Search Terms"); } } catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + '
Skip to content

docs(repo): Document Client Trust duration and cookieExpiresAt usage - #9350

Merged
SarahSoutoul merged 3 commits into
mainfrom
ss/DOCS-11777
Aug 7, 2026
Merged

docs(repo): Document Client Trust duration and cookieExpiresAt usage#9350
SarahSoutoul merged 3 commits into
mainfrom
ss/DOCS-11777

Conversation

@SarahSoutoul

@SarahSoutoulSarahSoutoul commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

Description

Clarifies the ClientResource.cookieExpiresAt JSDoc so developers understand that it reports the client authentication cookie’s current expiration time, can change when Clerk refreshes the cookie, and can be null.

The updated documentation also explains that Device Trust uses the client cookie to recognize a known browser and links to the Device Trust guide.

An empty changeset is included because this is a documentation-only package change.

This fixes this ticket, with its sibling clerk-docs PR.

Checklist

  • pnpm test runs as expected.
  • pnpm build runs as expected.
  • (If applicable) JSDoc comments have been added or updated for any package exports
  • (If applicable) Documentation has been updated

Type of change

  • 🐛 Bug fix
  • 🌟 New feature
  • 🔨 Breaking change
  • 📖 Refactoring / dependency upgrade / documentation
  • other:

@SarahSoutoulSarahSoutoul self-assigned this Aug 6, 2026
@changeset-bot

changeset-botBot commented Aug 6, 2026

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: 8a815c4

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 23 packages
NameType
@clerk/sharedPatch
@clerk/astroPatch
@clerk/backendPatch
@clerk/chrome-extensionPatch
@clerk/clerk-jsPatch
@clerk/electronPatch
@clerk/expo-passkeysPatch
@clerk/expoPatch
@clerk/expressPatch
@clerk/fastifyPatch
@clerk/headlessPatch
@clerk/honoPatch
@clerk/localizationsPatch
@clerk/mswPatch
@clerk/nextjsPatch
@clerk/nuxtPatch
@clerk/react-routerPatch
@clerk/reactPatch
@clerk/tanstack-react-startPatch
@clerk/testingPatch
@clerk/uiPatch
@clerk/vuePatch
@clerk/swingsetPatch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@vercel

vercelBot commented Aug 6, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentActionsUpdated (UTC)
clerk-js-sandboxReadyReadyPreviewAug 6, 2026 10:54pm
swingsetReadyReadyPreviewAug 6, 2026 10:54pm

Request Review

@pkg-pr-new

pkg-pr-newBot commented Aug 6, 2026

Copy link
Copy Markdown

Open in StackBlitz

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@9350

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@9350

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@9350

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@9350

@clerk/electron

npm i https://pkg.pr.new/@clerk/electron@9350

@clerk/electron-passkeys

npm i https://pkg.pr.new/@clerk/electron-passkeys@9350

@clerk/eslint-plugin

npm i https://pkg.pr.new/@clerk/eslint-plugin@9350

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@9350

@clerk/expo-google-signin

npm i https://pkg.pr.new/@clerk/expo-google-signin@9350

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@9350

@clerk/express

npm i https://pkg.pr.new/@clerk/express@9350

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@9350

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@9350

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@9350

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@9350

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@9350

@clerk/react

npm i https://pkg.pr.new/@clerk/react@9350

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@9350

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@9350

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@9350

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@9350

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@9350

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@9350

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@9350

commit: 8a815c4

@SarahSoutoulSarahSoutoul changed the title Document Client Trust duration and cookieExpiresAt usagedocs(repo): Document Client Trust duration and cookieExpiresAt usageAug 6, 2026
@SarahSoutoul
SarahSoutoul marked this pull request as ready for review August 6, 2026 14:41
@github-actions

github-actionsBot commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

API Changes Report

Generated by Break Check on 2026-08-06T23:15:13.561Z

Summary

MetricCount
Packages analyzed19
Packages with changes0
🔴 Breaking changes0
🟡 Non-breaking changes0
🟢 Additions0

No API Changes Detected

All packages have stable APIs with no detected changes.


Report generated by Break Check

Last ran on 8a815c4.

@coderabbitai

coderabbitaiBot commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

Review Change Stack

📝 Walkthrough

Walkthrough

The pull request clarifies the cookieExpiresAt documentation. It describes client authentication cookie refreshes, nullable values, and Device Trust usage. It also adds patch Changeset metadata.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Suggested reviewers:manovotny, mwickett

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check nameStatusExplanation
Title check✅ PassedThe title clearly identifies the documentation update for cookieExpiresAt and its trust-related usage.
Description check✅ PassedThe description directly explains the JSDoc changes, Device Trust context, changeset, and related documentation work.
Docstring Coverage✅ PassedNo functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check✅ PassedCheck skipped because no linked issues were found for this pull request.
Out of Scope Changes check✅ PassedCheck skipped because no linked issues were found for this pull request.

Comment @coderabbitai help to get the list of available commands.

…geset
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@manovotny

manovotny commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

Pushed a change directly in 4dcedc9.

  • Swapped the empty changeset for a @clerk/shared: patch one so this JSDoc clarification actually ships to consumers.

@coderabbitaicoderabbitaiBot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In @.changeset/tidy-client-cookie-docs.md:
- Line 5: Update the documentation for ClientResource.cookieExpiresAt to
describe it as the current expiration time of the client authentication cookie
used by Device Trust to recognize a known browser. Explicitly state that it is
nullable and may change when Clerk refreshes the client cookie, without implying
that the property contains the cookie itself.
🪄 Autofix

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Repository YAML (base), Organization UI (inherited)

Review profile: CHILL

Plan: Pro Plus

Run ID: 105813fd-4d6c-42fa-a69f-a9d29e72d073

📥 Commits

Reviewing files that changed from the base of the PR and between 2095a70 and 4dcedc9.

📒 Files selected for processing (1)
  • .changeset/tidy-client-cookie-docs.md
🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

  • clerk/clerk_go(manual)
  • clerk/dashboard(manual)
  • clerk/accounts(manual)
  • clerk/backoffice(manual)
  • clerk/clerk(manual) → reviewed against open PR #3108ss/DOCS-11777 instead of the default branch
  • clerk/clerk-docs(manual)
  • clerk/cloudflare-workers(manual)
  • clerk/clerk-ios(auto-detected)
  • clerk/clerk-android(auto-detected)
  • clerk/cli(auto-detected)

'@clerk/shared': patch
---

Clarify that `ClientResource.cookieExpiresAt` is nullable, can change when Clerk refreshes the client cookie, and reflects the cookie Device Trust uses to recognize a browser.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

📐 Maintainability & Code Quality | 🟡 Minor | ⚡ Quick win

Describe cookieExpiresAt as an expiration time.

The implementation stores cookieExpiresAt as Date | null. The phrase “reflects the cookie” can imply that the property contains the cookie itself. State that it represents the current expiration time of the client authentication cookie used by Device Trust to recognize a known browser.

Proposed wording
-Clarify that `ClientResource.cookieExpiresAt` is nullable, can change when Clerk refreshes the client cookie, and reflects the cookie Device Trust uses to recognize a browser.+Clarify that `ClientResource.cookieExpiresAt` is nullable, can change when Clerk refreshes the client cookie, and represents the current expiration time of the client authentication cookie used by Device Trust to recognize a known browser.
📝 Committable suggestion

‼️IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
Clarify that `ClientResource.cookieExpiresAt` is nullable, can change when Clerk refreshes the client cookie, and reflects the cookie Device Trust uses to recognize a browser.
Clarify that `ClientResource.cookieExpiresAt` is nullable, can change when Clerk refreshes the client cookie, and represents the current expiration time of the client authentication cookie used by Device Trust to recognize a known browser.
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In @.changeset/tidy-client-cookie-docs.md at line 5, Update the documentation
for ClientResource.cookieExpiresAt to describe it as the current expiration time
of the client authentication cookie used by Device Trust to recognize a known
browser. Explicitly state that it is nullable and may change when Clerk
refreshes the client cookie, without implying that the property contains the
cookie itself.

@SarahSoutoul
SarahSoutoul merged commit 34d278b into mainAug 7, 2026
52 checks passed
@SarahSoutoul
SarahSoutoul deleted the ss/DOCS-11777 branch August 7, 2026 07:54
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants

@SarahSoutoul@manovotny@mwickett
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Strip utm_, fbclid, gclid, etc. from all links on page\n(function() {\n var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',\n 'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',\n 'ref', 'ref_src', 'source', 'medium', 'campaign'];\n \n function cleanUrl(url) {\n try {\n var u = new URL(url, window.location.origin);\n var changed = false;\n trackingParams.forEach(function(p) {\n if (u.searchParams.has(p)) {\n u.searchParams.delete(p);\n changed = true;\n }\n });\n return changed ? u.toString() : url;\n } catch (e) {\n return url;\n }\n }\n \n function cleanLinks() {\n document.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n \n cleanLinks();\n \n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1) {\n if (node.tagName === 'A') cleanLinks();\n node.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Remove Tracking Parameters from Links"); } } catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); } })(); (function(){ try { var __m = "youtube.com"; var __re = new RegExp('^' + "youtube\\.com" + '
Skip to content

docs(repo): Document Client Trust duration and cookieExpiresAt usage - #9350

Merged
SarahSoutoul merged 3 commits into
mainfrom
ss/DOCS-11777
Aug 7, 2026
Merged

docs(repo): Document Client Trust duration and cookieExpiresAt usage#9350
SarahSoutoul merged 3 commits into
mainfrom
ss/DOCS-11777

Conversation

@SarahSoutoul

@SarahSoutoulSarahSoutoul commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

Description

Clarifies the ClientResource.cookieExpiresAt JSDoc so developers understand that it reports the client authentication cookie’s current expiration time, can change when Clerk refreshes the cookie, and can be null.

The updated documentation also explains that Device Trust uses the client cookie to recognize a known browser and links to the Device Trust guide.

An empty changeset is included because this is a documentation-only package change.

This fixes this ticket, with its sibling clerk-docs PR.

Checklist

  • pnpm test runs as expected.
  • pnpm build runs as expected.
  • (If applicable) JSDoc comments have been added or updated for any package exports
  • (If applicable) Documentation has been updated

Type of change

  • 🐛 Bug fix
  • 🌟 New feature
  • 🔨 Breaking change
  • 📖 Refactoring / dependency upgrade / documentation
  • other:

@SarahSoutoulSarahSoutoul self-assigned this Aug 6, 2026
@changeset-bot

changeset-botBot commented Aug 6, 2026

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: 8a815c4

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 23 packages
NameType
@clerk/sharedPatch
@clerk/astroPatch
@clerk/backendPatch
@clerk/chrome-extensionPatch
@clerk/clerk-jsPatch
@clerk/electronPatch
@clerk/expo-passkeysPatch
@clerk/expoPatch
@clerk/expressPatch
@clerk/fastifyPatch
@clerk/headlessPatch
@clerk/honoPatch
@clerk/localizationsPatch
@clerk/mswPatch
@clerk/nextjsPatch
@clerk/nuxtPatch
@clerk/react-routerPatch
@clerk/reactPatch
@clerk/tanstack-react-startPatch
@clerk/testingPatch
@clerk/uiPatch
@clerk/vuePatch
@clerk/swingsetPatch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@vercel

vercelBot commented Aug 6, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentActionsUpdated (UTC)
clerk-js-sandboxReadyReadyPreviewAug 6, 2026 10:54pm
swingsetReadyReadyPreviewAug 6, 2026 10:54pm

Request Review

@pkg-pr-new

pkg-pr-newBot commented Aug 6, 2026

Copy link
Copy Markdown

Open in StackBlitz

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@9350

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@9350

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@9350

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@9350

@clerk/electron

npm i https://pkg.pr.new/@clerk/electron@9350

@clerk/electron-passkeys

npm i https://pkg.pr.new/@clerk/electron-passkeys@9350

@clerk/eslint-plugin

npm i https://pkg.pr.new/@clerk/eslint-plugin@9350

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@9350

@clerk/expo-google-signin

npm i https://pkg.pr.new/@clerk/expo-google-signin@9350

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@9350

@clerk/express

npm i https://pkg.pr.new/@clerk/express@9350

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@9350

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@9350

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@9350

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@9350

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@9350

@clerk/react

npm i https://pkg.pr.new/@clerk/react@9350

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@9350

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@9350

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@9350

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@9350

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@9350

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@9350

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@9350

commit: 8a815c4

@SarahSoutoulSarahSoutoul changed the title Document Client Trust duration and cookieExpiresAt usagedocs(repo): Document Client Trust duration and cookieExpiresAt usageAug 6, 2026
@SarahSoutoul
SarahSoutoul marked this pull request as ready for review August 6, 2026 14:41
@github-actions

github-actionsBot commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

API Changes Report

Generated by Break Check on 2026-08-06T23:15:13.561Z

Summary

MetricCount
Packages analyzed19
Packages with changes0
🔴 Breaking changes0
🟡 Non-breaking changes0
🟢 Additions0

No API Changes Detected

All packages have stable APIs with no detected changes.


Report generated by Break Check

Last ran on 8a815c4.

@coderabbitai

coderabbitaiBot commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

Review Change Stack

📝 Walkthrough

Walkthrough

The pull request clarifies the cookieExpiresAt documentation. It describes client authentication cookie refreshes, nullable values, and Device Trust usage. It also adds patch Changeset metadata.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Suggested reviewers:manovotny, mwickett

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check nameStatusExplanation
Title check✅ PassedThe title clearly identifies the documentation update for cookieExpiresAt and its trust-related usage.
Description check✅ PassedThe description directly explains the JSDoc changes, Device Trust context, changeset, and related documentation work.
Docstring Coverage✅ PassedNo functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check✅ PassedCheck skipped because no linked issues were found for this pull request.
Out of Scope Changes check✅ PassedCheck skipped because no linked issues were found for this pull request.

Comment @coderabbitai help to get the list of available commands.

…geset
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@manovotny

manovotny commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

Pushed a change directly in 4dcedc9.

  • Swapped the empty changeset for a @clerk/shared: patch one so this JSDoc clarification actually ships to consumers.

@coderabbitaicoderabbitaiBot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In @.changeset/tidy-client-cookie-docs.md:
- Line 5: Update the documentation for ClientResource.cookieExpiresAt to
describe it as the current expiration time of the client authentication cookie
used by Device Trust to recognize a known browser. Explicitly state that it is
nullable and may change when Clerk refreshes the client cookie, without implying
that the property contains the cookie itself.
🪄 Autofix

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Repository YAML (base), Organization UI (inherited)

Review profile: CHILL

Plan: Pro Plus

Run ID: 105813fd-4d6c-42fa-a69f-a9d29e72d073

📥 Commits

Reviewing files that changed from the base of the PR and between 2095a70 and 4dcedc9.

📒 Files selected for processing (1)
  • .changeset/tidy-client-cookie-docs.md
🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

  • clerk/clerk_go(manual)
  • clerk/dashboard(manual)
  • clerk/accounts(manual)
  • clerk/backoffice(manual)
  • clerk/clerk(manual) → reviewed against open PR #3108ss/DOCS-11777 instead of the default branch
  • clerk/clerk-docs(manual)
  • clerk/cloudflare-workers(manual)
  • clerk/clerk-ios(auto-detected)
  • clerk/clerk-android(auto-detected)
  • clerk/cli(auto-detected)

'@clerk/shared': patch
---

Clarify that `ClientResource.cookieExpiresAt` is nullable, can change when Clerk refreshes the client cookie, and reflects the cookie Device Trust uses to recognize a browser.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

📐 Maintainability & Code Quality | 🟡 Minor | ⚡ Quick win

Describe cookieExpiresAt as an expiration time.

The implementation stores cookieExpiresAt as Date | null. The phrase “reflects the cookie” can imply that the property contains the cookie itself. State that it represents the current expiration time of the client authentication cookie used by Device Trust to recognize a known browser.

Proposed wording
-Clarify that `ClientResource.cookieExpiresAt` is nullable, can change when Clerk refreshes the client cookie, and reflects the cookie Device Trust uses to recognize a browser.+Clarify that `ClientResource.cookieExpiresAt` is nullable, can change when Clerk refreshes the client cookie, and represents the current expiration time of the client authentication cookie used by Device Trust to recognize a known browser.
📝 Committable suggestion

‼️IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
Clarify that `ClientResource.cookieExpiresAt` is nullable, can change when Clerk refreshes the client cookie, and reflects the cookie Device Trust uses to recognize a browser.
Clarify that `ClientResource.cookieExpiresAt` is nullable, can change when Clerk refreshes the client cookie, and represents the current expiration time of the client authentication cookie used by Device Trust to recognize a known browser.
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In @.changeset/tidy-client-cookie-docs.md at line 5, Update the documentation
for ClientResource.cookieExpiresAt to describe it as the current expiration time
of the client authentication cookie used by Device Trust to recognize a known
browser. Explicitly state that it is nullable and may change when Clerk
refreshes the client cookie, without implying that the property contains the
cookie itself.

@SarahSoutoul
SarahSoutoul merged commit 34d278b into mainAug 7, 2026
52 checks passed
@SarahSoutoul
SarahSoutoul deleted the ss/DOCS-11777 branch August 7, 2026 07:54
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants

@SarahSoutoul@manovotny@mwickett
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Auto-enable theater mode on YouTube\n(function() {\n function tryTheater() {\n var btn = document.querySelector('button[aria-label=\"Theater mode\"], ytd-player #player button[title=\"Theater mode\"]');\n if (btn && !btn.classList.contains('activated')) {\n btn.click();\n }\n }\n \n // Try immediately\n tryTheater();\n \n // Try after navigation (SPA)\n var lastUrl = location.href;\n setInterval(function() {\n if (location.href !== lastUrl) {\n lastUrl = location.href;\n setTimeout(tryTheater, 500);\n }\n }, 1000);\n \n // Also try on player load\n var observer = new MutationObserver(tryTheater);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "YouTube Theater Mode Default"); } } catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + '
Skip to content

docs(repo): Document Client Trust duration and cookieExpiresAt usage - #9350

Merged
SarahSoutoul merged 3 commits into
mainfrom
ss/DOCS-11777
Aug 7, 2026
Merged

docs(repo): Document Client Trust duration and cookieExpiresAt usage#9350
SarahSoutoul merged 3 commits into
mainfrom
ss/DOCS-11777

Conversation

@SarahSoutoul

@SarahSoutoulSarahSoutoul commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

Description

Clarifies the ClientResource.cookieExpiresAt JSDoc so developers understand that it reports the client authentication cookie’s current expiration time, can change when Clerk refreshes the cookie, and can be null.

The updated documentation also explains that Device Trust uses the client cookie to recognize a known browser and links to the Device Trust guide.

An empty changeset is included because this is a documentation-only package change.

This fixes this ticket, with its sibling clerk-docs PR.

Checklist

  • pnpm test runs as expected.
  • pnpm build runs as expected.
  • (If applicable) JSDoc comments have been added or updated for any package exports
  • (If applicable) Documentation has been updated

Type of change

  • 🐛 Bug fix
  • 🌟 New feature
  • 🔨 Breaking change
  • 📖 Refactoring / dependency upgrade / documentation
  • other:

@SarahSoutoulSarahSoutoul self-assigned this Aug 6, 2026
@changeset-bot

changeset-botBot commented Aug 6, 2026

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: 8a815c4

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 23 packages
NameType
@clerk/sharedPatch
@clerk/astroPatch
@clerk/backendPatch
@clerk/chrome-extensionPatch
@clerk/clerk-jsPatch
@clerk/electronPatch
@clerk/expo-passkeysPatch
@clerk/expoPatch
@clerk/expressPatch
@clerk/fastifyPatch
@clerk/headlessPatch
@clerk/honoPatch
@clerk/localizationsPatch
@clerk/mswPatch
@clerk/nextjsPatch
@clerk/nuxtPatch
@clerk/react-routerPatch
@clerk/reactPatch
@clerk/tanstack-react-startPatch
@clerk/testingPatch
@clerk/uiPatch
@clerk/vuePatch
@clerk/swingsetPatch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@vercel

vercelBot commented Aug 6, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentActionsUpdated (UTC)
clerk-js-sandboxReadyReadyPreviewAug 6, 2026 10:54pm
swingsetReadyReadyPreviewAug 6, 2026 10:54pm

Request Review

@pkg-pr-new

pkg-pr-newBot commented Aug 6, 2026

Copy link
Copy Markdown

Open in StackBlitz

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@9350

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@9350

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@9350

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@9350

@clerk/electron

npm i https://pkg.pr.new/@clerk/electron@9350

@clerk/electron-passkeys

npm i https://pkg.pr.new/@clerk/electron-passkeys@9350

@clerk/eslint-plugin

npm i https://pkg.pr.new/@clerk/eslint-plugin@9350

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@9350

@clerk/expo-google-signin

npm i https://pkg.pr.new/@clerk/expo-google-signin@9350

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@9350

@clerk/express

npm i https://pkg.pr.new/@clerk/express@9350

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@9350

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@9350

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@9350

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@9350

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@9350

@clerk/react

npm i https://pkg.pr.new/@clerk/react@9350

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@9350

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@9350

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@9350

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@9350

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@9350

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@9350

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@9350

commit: 8a815c4

@SarahSoutoulSarahSoutoul changed the title Document Client Trust duration and cookieExpiresAt usagedocs(repo): Document Client Trust duration and cookieExpiresAt usageAug 6, 2026
@SarahSoutoul
SarahSoutoul marked this pull request as ready for review August 6, 2026 14:41
@github-actions

github-actionsBot commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

API Changes Report

Generated by Break Check on 2026-08-06T23:15:13.561Z

Summary

MetricCount
Packages analyzed19
Packages with changes0
🔴 Breaking changes0
🟡 Non-breaking changes0
🟢 Additions0

No API Changes Detected

All packages have stable APIs with no detected changes.


Report generated by Break Check

Last ran on 8a815c4.

@coderabbitai

coderabbitaiBot commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

Review Change Stack

📝 Walkthrough

Walkthrough

The pull request clarifies the cookieExpiresAt documentation. It describes client authentication cookie refreshes, nullable values, and Device Trust usage. It also adds patch Changeset metadata.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Suggested reviewers:manovotny, mwickett

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check nameStatusExplanation
Title check✅ PassedThe title clearly identifies the documentation update for cookieExpiresAt and its trust-related usage.
Description check✅ PassedThe description directly explains the JSDoc changes, Device Trust context, changeset, and related documentation work.
Docstring Coverage✅ PassedNo functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check✅ PassedCheck skipped because no linked issues were found for this pull request.
Out of Scope Changes check✅ PassedCheck skipped because no linked issues were found for this pull request.

Comment @coderabbitai help to get the list of available commands.

…geset
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@manovotny

manovotny commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

Pushed a change directly in 4dcedc9.

  • Swapped the empty changeset for a @clerk/shared: patch one so this JSDoc clarification actually ships to consumers.

@coderabbitaicoderabbitaiBot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In @.changeset/tidy-client-cookie-docs.md:
- Line 5: Update the documentation for ClientResource.cookieExpiresAt to
describe it as the current expiration time of the client authentication cookie
used by Device Trust to recognize a known browser. Explicitly state that it is
nullable and may change when Clerk refreshes the client cookie, without implying
that the property contains the cookie itself.
🪄 Autofix

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Repository YAML (base), Organization UI (inherited)

Review profile: CHILL

Plan: Pro Plus

Run ID: 105813fd-4d6c-42fa-a69f-a9d29e72d073

📥 Commits

Reviewing files that changed from the base of the PR and between 2095a70 and 4dcedc9.

📒 Files selected for processing (1)
  • .changeset/tidy-client-cookie-docs.md
🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

  • clerk/clerk_go(manual)
  • clerk/dashboard(manual)
  • clerk/accounts(manual)
  • clerk/backoffice(manual)
  • clerk/clerk(manual) → reviewed against open PR #3108ss/DOCS-11777 instead of the default branch
  • clerk/clerk-docs(manual)
  • clerk/cloudflare-workers(manual)
  • clerk/clerk-ios(auto-detected)
  • clerk/clerk-android(auto-detected)
  • clerk/cli(auto-detected)

'@clerk/shared': patch
---

Clarify that `ClientResource.cookieExpiresAt` is nullable, can change when Clerk refreshes the client cookie, and reflects the cookie Device Trust uses to recognize a browser.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

📐 Maintainability & Code Quality | 🟡 Minor | ⚡ Quick win

Describe cookieExpiresAt as an expiration time.

The implementation stores cookieExpiresAt as Date | null. The phrase “reflects the cookie” can imply that the property contains the cookie itself. State that it represents the current expiration time of the client authentication cookie used by Device Trust to recognize a known browser.

Proposed wording
-Clarify that `ClientResource.cookieExpiresAt` is nullable, can change when Clerk refreshes the client cookie, and reflects the cookie Device Trust uses to recognize a browser.+Clarify that `ClientResource.cookieExpiresAt` is nullable, can change when Clerk refreshes the client cookie, and represents the current expiration time of the client authentication cookie used by Device Trust to recognize a known browser.
📝 Committable suggestion

‼️IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
Clarify that `ClientResource.cookieExpiresAt` is nullable, can change when Clerk refreshes the client cookie, and reflects the cookie Device Trust uses to recognize a browser.
Clarify that `ClientResource.cookieExpiresAt` is nullable, can change when Clerk refreshes the client cookie, and represents the current expiration time of the client authentication cookie used by Device Trust to recognize a known browser.
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In @.changeset/tidy-client-cookie-docs.md at line 5, Update the documentation
for ClientResource.cookieExpiresAt to describe it as the current expiration time
of the client authentication cookie used by Device Trust to recognize a known
browser. Explicitly state that it is nullable and may change when Clerk
refreshes the client cookie, without implying that the property contains the
cookie itself.

@SarahSoutoul
SarahSoutoul merged commit 34d278b into mainAug 7, 2026
52 checks passed
@SarahSoutoul
SarahSoutoul deleted the ss/DOCS-11777 branch August 7, 2026 07:54
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants

@SarahSoutoul@manovotny@mwickett
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Remove or un-stick sticky/fixed headers that block content\n(function() {\n function unstick() {\n document.querySelectorAll('header, nav, [role=\"banner\"], .header, .navbar, .sticky, .fixed-top, [style*=\"position: fixed\"], [style*=\"position:sticky\"]').forEach(function(el) {\n if (el.style.position === 'fixed' || el.style.position === 'sticky' || \n getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {\n el.style.position = 'static';\n el.style.top = 'auto';\n el.style.zIndex = 'auto';\n }\n });\n }\n \n unstick();\n \n var observer = new MutationObserver(unstick);\n observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });\n})();", "Kill Sticky Headers"); } } catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + '
Skip to content

docs(repo): Document Client Trust duration and cookieExpiresAt usage - #9350

Merged
SarahSoutoul merged 3 commits into
mainfrom
ss/DOCS-11777
Aug 7, 2026
Merged

docs(repo): Document Client Trust duration and cookieExpiresAt usage#9350
SarahSoutoul merged 3 commits into
mainfrom
ss/DOCS-11777

Conversation

@SarahSoutoul

@SarahSoutoulSarahSoutoul commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

Description

Clarifies the ClientResource.cookieExpiresAt JSDoc so developers understand that it reports the client authentication cookie’s current expiration time, can change when Clerk refreshes the cookie, and can be null.

The updated documentation also explains that Device Trust uses the client cookie to recognize a known browser and links to the Device Trust guide.

An empty changeset is included because this is a documentation-only package change.

This fixes this ticket, with its sibling clerk-docs PR.

Checklist

  • pnpm test runs as expected.
  • pnpm build runs as expected.
  • (If applicable) JSDoc comments have been added or updated for any package exports
  • (If applicable) Documentation has been updated

Type of change

  • 🐛 Bug fix
  • 🌟 New feature
  • 🔨 Breaking change
  • 📖 Refactoring / dependency upgrade / documentation
  • other:

@SarahSoutoulSarahSoutoul self-assigned this Aug 6, 2026
@changeset-bot

changeset-botBot commented Aug 6, 2026

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: 8a815c4

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 23 packages
NameType
@clerk/sharedPatch
@clerk/astroPatch
@clerk/backendPatch
@clerk/chrome-extensionPatch
@clerk/clerk-jsPatch
@clerk/electronPatch
@clerk/expo-passkeysPatch
@clerk/expoPatch
@clerk/expressPatch
@clerk/fastifyPatch
@clerk/headlessPatch
@clerk/honoPatch
@clerk/localizationsPatch
@clerk/mswPatch
@clerk/nextjsPatch
@clerk/nuxtPatch
@clerk/react-routerPatch
@clerk/reactPatch
@clerk/tanstack-react-startPatch
@clerk/testingPatch
@clerk/uiPatch
@clerk/vuePatch
@clerk/swingsetPatch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@vercel

vercelBot commented Aug 6, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentActionsUpdated (UTC)
clerk-js-sandboxReadyReadyPreviewAug 6, 2026 10:54pm
swingsetReadyReadyPreviewAug 6, 2026 10:54pm

Request Review

@pkg-pr-new

pkg-pr-newBot commented Aug 6, 2026

Copy link
Copy Markdown

Open in StackBlitz

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@9350

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@9350

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@9350

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@9350

@clerk/electron

npm i https://pkg.pr.new/@clerk/electron@9350

@clerk/electron-passkeys

npm i https://pkg.pr.new/@clerk/electron-passkeys@9350

@clerk/eslint-plugin

npm i https://pkg.pr.new/@clerk/eslint-plugin@9350

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@9350

@clerk/expo-google-signin

npm i https://pkg.pr.new/@clerk/expo-google-signin@9350

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@9350

@clerk/express

npm i https://pkg.pr.new/@clerk/express@9350

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@9350

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@9350

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@9350

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@9350

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@9350

@clerk/react

npm i https://pkg.pr.new/@clerk/react@9350

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@9350

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@9350

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@9350

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@9350

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@9350

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@9350

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@9350

commit: 8a815c4

@SarahSoutoulSarahSoutoul changed the title Document Client Trust duration and cookieExpiresAt usagedocs(repo): Document Client Trust duration and cookieExpiresAt usageAug 6, 2026
@SarahSoutoul
SarahSoutoul marked this pull request as ready for review August 6, 2026 14:41
@github-actions

github-actionsBot commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

API Changes Report

Generated by Break Check on 2026-08-06T23:15:13.561Z

Summary

MetricCount
Packages analyzed19
Packages with changes0
🔴 Breaking changes0
🟡 Non-breaking changes0
🟢 Additions0

No API Changes Detected

All packages have stable APIs with no detected changes.


Report generated by Break Check

Last ran on 8a815c4.

@coderabbitai

coderabbitaiBot commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

Review Change Stack

📝 Walkthrough

Walkthrough

The pull request clarifies the cookieExpiresAt documentation. It describes client authentication cookie refreshes, nullable values, and Device Trust usage. It also adds patch Changeset metadata.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Suggested reviewers:manovotny, mwickett

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check nameStatusExplanation
Title check✅ PassedThe title clearly identifies the documentation update for cookieExpiresAt and its trust-related usage.
Description check✅ PassedThe description directly explains the JSDoc changes, Device Trust context, changeset, and related documentation work.
Docstring Coverage✅ PassedNo functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check✅ PassedCheck skipped because no linked issues were found for this pull request.
Out of Scope Changes check✅ PassedCheck skipped because no linked issues were found for this pull request.

Comment @coderabbitai help to get the list of available commands.

…geset
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@manovotny

manovotny commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

Pushed a change directly in 4dcedc9.

  • Swapped the empty changeset for a @clerk/shared: patch one so this JSDoc clarification actually ships to consumers.

@coderabbitaicoderabbitaiBot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In @.changeset/tidy-client-cookie-docs.md:
- Line 5: Update the documentation for ClientResource.cookieExpiresAt to
describe it as the current expiration time of the client authentication cookie
used by Device Trust to recognize a known browser. Explicitly state that it is
nullable and may change when Clerk refreshes the client cookie, without implying
that the property contains the cookie itself.
🪄 Autofix

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Repository YAML (base), Organization UI (inherited)

Review profile: CHILL

Plan: Pro Plus

Run ID: 105813fd-4d6c-42fa-a69f-a9d29e72d073

📥 Commits

Reviewing files that changed from the base of the PR and between 2095a70 and 4dcedc9.

📒 Files selected for processing (1)
  • .changeset/tidy-client-cookie-docs.md
🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

  • clerk/clerk_go(manual)
  • clerk/dashboard(manual)
  • clerk/accounts(manual)
  • clerk/backoffice(manual)
  • clerk/clerk(manual) → reviewed against open PR #3108ss/DOCS-11777 instead of the default branch
  • clerk/clerk-docs(manual)
  • clerk/cloudflare-workers(manual)
  • clerk/clerk-ios(auto-detected)
  • clerk/clerk-android(auto-detected)
  • clerk/cli(auto-detected)

'@clerk/shared': patch
---

Clarify that `ClientResource.cookieExpiresAt` is nullable, can change when Clerk refreshes the client cookie, and reflects the cookie Device Trust uses to recognize a browser.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

📐 Maintainability & Code Quality | 🟡 Minor | ⚡ Quick win

Describe cookieExpiresAt as an expiration time.

The implementation stores cookieExpiresAt as Date | null. The phrase “reflects the cookie” can imply that the property contains the cookie itself. State that it represents the current expiration time of the client authentication cookie used by Device Trust to recognize a known browser.

Proposed wording
-Clarify that `ClientResource.cookieExpiresAt` is nullable, can change when Clerk refreshes the client cookie, and reflects the cookie Device Trust uses to recognize a browser.+Clarify that `ClientResource.cookieExpiresAt` is nullable, can change when Clerk refreshes the client cookie, and represents the current expiration time of the client authentication cookie used by Device Trust to recognize a known browser.
📝 Committable suggestion

‼️IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
Clarify that `ClientResource.cookieExpiresAt` is nullable, can change when Clerk refreshes the client cookie, and reflects the cookie Device Trust uses to recognize a browser.
Clarify that `ClientResource.cookieExpiresAt` is nullable, can change when Clerk refreshes the client cookie, and represents the current expiration time of the client authentication cookie used by Device Trust to recognize a known browser.
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In @.changeset/tidy-client-cookie-docs.md at line 5, Update the documentation
for ClientResource.cookieExpiresAt to describe it as the current expiration time
of the client authentication cookie used by Device Trust to recognize a known
browser. Explicitly state that it is nullable and may change when Clerk
refreshes the client cookie, without implying that the property contains the
cookie itself.

@SarahSoutoul
SarahSoutoul merged commit 34d278b into mainAug 7, 2026
52 checks passed
@SarahSoutoul
SarahSoutoul deleted the ss/DOCS-11777 branch August 7, 2026 07:54
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants

@SarahSoutoul@manovotny@mwickett
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Universal Dark Mode - works on any site\n(function() {\n var enabled = true;\n \n function applyDarkMode() {\n if (!enabled) return;\n \n // Create style element if it doesn't exist\n var style = document.getElementById('universal-dark-mode-style');\n if (!style) {\n style = document.createElement('style');\n style.id = 'universal-dark-mode-style';\n document.head.appendChild(style);\n }\n \n // Dark mode CSS - inverts colors but preserves images/video\n style.textContent = '\n /* Invert everything except media */\n html {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #1a1a2e !important;\n }\n \n /* Restore images, videos, iframes, canvas */\n img, video, iframe, canvas, svg, picture, [style*=\"background-image\"] {\n filter: invert(1) hue-rotate(180deg) !important;\n }\n \n /* Preserve specific elements that should not be inverted */\n .no-dark-mode, .no-dark-mode *,\n [data-theme=\"light\"], [data-theme=\"light\"],\n .ace_editor, .ace_editor *,\n .CodeMirror, .CodeMirror *,\n .monaco-editor, .monaco-editor *,\n .markdown-body pre, .markdown-body pre *,\n .highlight, .highlight *,\n pre code, pre code * {\n filter: none !important;\n }\n \n /* Fix common UI elements */\n .modal, .popup, .dropdown-menu, .tooltip, .popover {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #2d2d44 !important;\n border-color: #444 !important;\n }\n \n /* Scrollbars */\n ::-webkit-scrollbar { background: #1a1a2e !important; }\n ::-webkit-scrollbar-thumb { background: #444 !important; }\n ::-webkit-scrollbar-thumb:hover { background: #555 !important; }\n \n /* Selection */\n ::selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ';\n }\n \n function removeDarkMode() {\n var style = document.getElementById('universal-dark-mode-style');\n if (style) style.remove();\n }\n \n // Toggle with Alt+Shift+D\n document.addEventListener('keydown', function(e) {\n if (e.altKey && e.shiftKey && e.key === 'D') {\n e.preventDefault();\n enabled = !enabled;\n if (enabled) {\n applyDarkMode();\n console.log('[Universal Dark Mode] Enabled');\n } else {\n removeDarkMode();\n console.log('[Universal Dark Mode] Disabled');\n }\n }\n });\n \n // Apply on load\n applyDarkMode();\n \n // Re-apply on dynamic content\n var observer = new MutationObserver(function(mutations) {\n if (enabled && !document.getElementById('universal-dark-mode-style')) {\n applyDarkMode();\n }\n });\n observer.observe(document.head, { childList: true });\n \n console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle');\n})();", "Universal Dark Mode"); } } catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); } })(); })();
Skip to content

docs(repo): Document Client Trust duration and cookieExpiresAt usage - #9350

Merged
SarahSoutoul merged 3 commits into
mainfrom
ss/DOCS-11777
Aug 7, 2026
Merged

docs(repo): Document Client Trust duration and cookieExpiresAt usage#9350
SarahSoutoul merged 3 commits into
mainfrom
ss/DOCS-11777

Conversation

@SarahSoutoul

@SarahSoutoulSarahSoutoul commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

Description

Clarifies the ClientResource.cookieExpiresAt JSDoc so developers understand that it reports the client authentication cookie’s current expiration time, can change when Clerk refreshes the cookie, and can be null.

The updated documentation also explains that Device Trust uses the client cookie to recognize a known browser and links to the Device Trust guide.

An empty changeset is included because this is a documentation-only package change.

This fixes this ticket, with its sibling clerk-docs PR.

Checklist

  • pnpm test runs as expected.
  • pnpm build runs as expected.
  • (If applicable) JSDoc comments have been added or updated for any package exports
  • (If applicable) Documentation has been updated

Type of change

  • 🐛 Bug fix
  • 🌟 New feature
  • 🔨 Breaking change
  • 📖 Refactoring / dependency upgrade / documentation
  • other:

@SarahSoutoulSarahSoutoul self-assigned this Aug 6, 2026
@changeset-bot

changeset-botBot commented Aug 6, 2026

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: 8a815c4

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 23 packages
NameType
@clerk/sharedPatch
@clerk/astroPatch
@clerk/backendPatch
@clerk/chrome-extensionPatch
@clerk/clerk-jsPatch
@clerk/electronPatch
@clerk/expo-passkeysPatch
@clerk/expoPatch
@clerk/expressPatch
@clerk/fastifyPatch
@clerk/headlessPatch
@clerk/honoPatch
@clerk/localizationsPatch
@clerk/mswPatch
@clerk/nextjsPatch
@clerk/nuxtPatch
@clerk/react-routerPatch
@clerk/reactPatch
@clerk/tanstack-react-startPatch
@clerk/testingPatch
@clerk/uiPatch
@clerk/vuePatch
@clerk/swingsetPatch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@vercel

vercelBot commented Aug 6, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentActionsUpdated (UTC)
clerk-js-sandboxReadyReadyPreviewAug 6, 2026 10:54pm
swingsetReadyReadyPreviewAug 6, 2026 10:54pm

Request Review

@pkg-pr-new

pkg-pr-newBot commented Aug 6, 2026

Copy link
Copy Markdown

Open in StackBlitz

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@9350

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@9350

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@9350

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@9350

@clerk/electron

npm i https://pkg.pr.new/@clerk/electron@9350

@clerk/electron-passkeys

npm i https://pkg.pr.new/@clerk/electron-passkeys@9350

@clerk/eslint-plugin

npm i https://pkg.pr.new/@clerk/eslint-plugin@9350

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@9350

@clerk/expo-google-signin

npm i https://pkg.pr.new/@clerk/expo-google-signin@9350

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@9350

@clerk/express

npm i https://pkg.pr.new/@clerk/express@9350

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@9350

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@9350

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@9350

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@9350

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@9350

@clerk/react

npm i https://pkg.pr.new/@clerk/react@9350

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@9350

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@9350

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@9350

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@9350

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@9350

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@9350

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@9350

commit: 8a815c4

@SarahSoutoulSarahSoutoul changed the title Document Client Trust duration and cookieExpiresAt usagedocs(repo): Document Client Trust duration and cookieExpiresAt usageAug 6, 2026
@SarahSoutoul
SarahSoutoul marked this pull request as ready for review August 6, 2026 14:41
@github-actions

github-actionsBot commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

API Changes Report

Generated by Break Check on 2026-08-06T23:15:13.561Z

Summary

MetricCount
Packages analyzed19
Packages with changes0
🔴 Breaking changes0
🟡 Non-breaking changes0
🟢 Additions0

No API Changes Detected

All packages have stable APIs with no detected changes.


Report generated by Break Check

Last ran on 8a815c4.

@coderabbitai

coderabbitaiBot commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

Review Change Stack

📝 Walkthrough

Walkthrough

The pull request clarifies the cookieExpiresAt documentation. It describes client authentication cookie refreshes, nullable values, and Device Trust usage. It also adds patch Changeset metadata.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Suggested reviewers:manovotny, mwickett

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check nameStatusExplanation
Title check✅ PassedThe title clearly identifies the documentation update for cookieExpiresAt and its trust-related usage.
Description check✅ PassedThe description directly explains the JSDoc changes, Device Trust context, changeset, and related documentation work.
Docstring Coverage✅ PassedNo functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check✅ PassedCheck skipped because no linked issues were found for this pull request.
Out of Scope Changes check✅ PassedCheck skipped because no linked issues were found for this pull request.

Comment @coderabbitai help to get the list of available commands.

…geset
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@manovotny

manovotny commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

Pushed a change directly in 4dcedc9.

  • Swapped the empty changeset for a @clerk/shared: patch one so this JSDoc clarification actually ships to consumers.

@coderabbitaicoderabbitaiBot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In @.changeset/tidy-client-cookie-docs.md:
- Line 5: Update the documentation for ClientResource.cookieExpiresAt to
describe it as the current expiration time of the client authentication cookie
used by Device Trust to recognize a known browser. Explicitly state that it is
nullable and may change when Clerk refreshes the client cookie, without implying
that the property contains the cookie itself.
🪄 Autofix

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Repository YAML (base), Organization UI (inherited)

Review profile: CHILL

Plan: Pro Plus

Run ID: 105813fd-4d6c-42fa-a69f-a9d29e72d073

📥 Commits

Reviewing files that changed from the base of the PR and between 2095a70 and 4dcedc9.

📒 Files selected for processing (1)
  • .changeset/tidy-client-cookie-docs.md
🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

  • clerk/clerk_go(manual)
  • clerk/dashboard(manual)
  • clerk/accounts(manual)
  • clerk/backoffice(manual)
  • clerk/clerk(manual) → reviewed against open PR #3108ss/DOCS-11777 instead of the default branch
  • clerk/clerk-docs(manual)
  • clerk/cloudflare-workers(manual)
  • clerk/clerk-ios(auto-detected)
  • clerk/clerk-android(auto-detected)
  • clerk/cli(auto-detected)

'@clerk/shared': patch
---

Clarify that `ClientResource.cookieExpiresAt` is nullable, can change when Clerk refreshes the client cookie, and reflects the cookie Device Trust uses to recognize a browser.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

📐 Maintainability & Code Quality | 🟡 Minor | ⚡ Quick win

Describe cookieExpiresAt as an expiration time.

The implementation stores cookieExpiresAt as Date | null. The phrase “reflects the cookie” can imply that the property contains the cookie itself. State that it represents the current expiration time of the client authentication cookie used by Device Trust to recognize a known browser.

Proposed wording
-Clarify that `ClientResource.cookieExpiresAt` is nullable, can change when Clerk refreshes the client cookie, and reflects the cookie Device Trust uses to recognize a browser.+Clarify that `ClientResource.cookieExpiresAt` is nullable, can change when Clerk refreshes the client cookie, and represents the current expiration time of the client authentication cookie used by Device Trust to recognize a known browser.
📝 Committable suggestion

‼️IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
Clarify that `ClientResource.cookieExpiresAt` is nullable, can change when Clerk refreshes the client cookie, and reflects the cookie Device Trust uses to recognize a browser.
Clarify that `ClientResource.cookieExpiresAt` is nullable, can change when Clerk refreshes the client cookie, and represents the current expiration time of the client authentication cookie used by Device Trust to recognize a known browser.
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In @.changeset/tidy-client-cookie-docs.md at line 5, Update the documentation
for ClientResource.cookieExpiresAt to describe it as the current expiration time
of the client authentication cookie used by Device Trust to recognize a known
browser. Explicitly state that it is nullable and may change when Clerk
refreshes the client cookie, without implying that the property contains the
cookie itself.

@SarahSoutoul
SarahSoutoul merged commit 34d278b into mainAug 7, 2026
52 checks passed
@SarahSoutoul
SarahSoutoul deleted the ss/DOCS-11777 branch August 7, 2026 07:54
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants

@SarahSoutoul@manovotny@mwickett